nginx日志中出现很多不是我博客的连接,请问这个是怎么回事?
今天在登录服务器查看日志时,发现nginx的日志以及我的博客日志中出现很多不是我博客的连接请求,如下:
博客日志,部分信息:
tail -f /usr/nginx/logs/ilanni.com.log
183.60.202.183 - - [22/Nov/2014:22:48:00 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 403 231 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)" "-"
183.60.202.183 - - [22/Nov/2014:22:48:01 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 403 231 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)" "-"
60.169.78.143 - - [22/Nov/2014:22:48:01 +0800] "GET http://www.hejkal.cz/nakladatelstvi/titul.asp?75HTTP/1.1" 403 231 "" "" "-"
183.63.149.115 - - [22/Nov/2014:22:48:01 +0800] "GET http://www.linkedin.com/ HTTP/1.1" 499 0 "-" "Jakarta Commons-HttpClient/3.1" "-"
183.60.202.183 - - [22/Nov/2014:22:48:02 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 403 231 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)" "-"
nginx错误日志,部分信息:
tail -f /usr/nginx/logs/error.log
2014/11/22 22:43:40 [error] 1366#0: *1457 access forbidden by rule, client: 218.75.153.169, server:www.ilanni.com, request: "GET http://122.224.19.171:98/CF/1/酒仙魔域.rar HTTP/1.1", host: "122.224.19.171:98", referrer: "http://122.224.19.171:98/CF/1/酒仙魔域.rar"
2014/11/22 22:43:41 [error] 1366#0: *1458 access forbidden by rule, client: 218.75.153.169, server:www.ilanni.com, request: "GET http://122.224.19.171:98/CF/1/酒仙魔域.rar HTTP/1.1", host: "122.224.19.171:98", referrer: "http://122.224.19.171:98/CF/1/酒仙魔域.rar"
根据博客的日志分析,122.224.19.171这个IP,怎么会出现一直出现,而且貌似还是一个下载连接。
根据nginx的日志分析,122.224.19.171这个IP的请求被拒绝,这个确实是的。我在nginx的配置文件中,直接把此IP给屏蔽了。
而nginx的接入日志,部分信息如下
tail -f /usr/local/nginx/logs/access.log
183.60.202.183 - - [22/Nov/2014:22:21:14 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 301 255 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)"
183.60.202.183 - - [22/Nov/2014:22:21:14 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 301 255 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)"
183.60.202.183 - - [22/Nov/2014:22:21:14 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 301 255 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)"
183.60.202.183 - - [22/Nov/2014:22:21:14 +0800] "GEThttp://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar HTTP/1.1" 301 255 "http://122.224.19.171:98/CF/1/\xBE\xC6\xCF\xC9\xC4\xA7\xD3\xF2.rar" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1)"
请问各位大婶,这个是怎么回事。如何进行屏蔽?很多报错信息,地址如下:
[root@ilanni logs]# tail -f error.log
2014/11/22 21:42:55 [error] 22471#0: *6539980 "/www/ilanni.com/my2/index.php" is not found (2: No such file or directory), client: 183.136.214.89, server: www.ilanni.com, request: "GET http://www.mymy120.net:81/my2/ HTTP/1.1", host: "www.mymy120.net:81", referrer: "http://www.mymy120.net:81/my2/"
2014/11/22 21:42:55 [error] 22471#0: *6539981 open() "/www/ilanni.com/my2/大天使魔域.rar" failed (2: No such file or directory), client: 183.60.202.183, server: www.ilanni.com, request: "GET http://www.mymy120.net:81/my2/大天使魔域.rar HTTP/1.1", host: "www.mymy120.net:81", referrer: "http://www.mymy120.net:81/my2/大天使魔域.rar"
2014/11/22 21:42:55 [error] 22471#0: *6539982 open() "/www/ilanni.com/my2/大天使魔域.rar" failed (2: No such file or directory), client: 183.60.202.183, server: www.ilanni.com, request: "GET http://www.mymy120.net:81/my2/大天使魔域.rar HTTP/1.1", host: "www.mymy120.net:81", referrer: "http://www.mymy120.net:81/my2/大天使魔域.rar"
2014/11/22 21:42:55 [error] 22471#0: *6539983 open() "/www/ilanni.com/my2/大天使魔域.rar" failed (2: No such file or directory), client: 183.60.202.183, server: www.ilanni.com, request: "GET http://www.mymy120.net:81/my2/大天使魔域.rar HTTP/1.1", host: "www.mymy120.net:81", referrer: "http://www.mymy120.net:81/my2/大天使魔域.rar"今天登录服务器,查看nginx日志
/www/ilanni.com目录下没有my2这个目录,我初步判断是 183.136.214.89 返链接到我的服务器。
不知道是怎么回事,哪位大婶帮忙看看……
-------------------------
版权声明:本文内容由阿里云实名注册用户自发贡献,版权归原作者所有,阿里云开发者社区不拥有其著作权,亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容,填写侵权投诉表单进行举报,一经查实,本社区将立刻删除涉嫌侵权内容。